Grafana Labs Open Observability Platform

Don't miss out!

Thousands of developers use stack.watch to stay informed.
Get an email whenever new security vulnerabilities are reported in any Grafana Labs product.

RSS Feeds for Grafana Labs security vulnerabilities

Create a CVE RSS feed including security vulnerabilities found in Grafana Labs products with stack.watch. Just hit watch, then grab your custom RSS feed url.

Products by Grafana Labs Sorted by Most Security Vulnerabilities since 2018

Grafana Labs Grafana130 vulnerabilities

Grafana Labs Agent2 vulnerabilities

Grafana Labs Enterprise Metrics2 vulnerabilities

Grafana Labs Alloy1 vulnerability

Grafana Labs Google Sheets1 vulnerability

Grafana Labs Grafana Enterprise1 vulnerability

Grafana Labs Grafana Image Renderer1 vulnerability

Grafana Labs Loki1 vulnerability

Grafana Labs Oncall1 vulnerability

Grafana Labs Piechart Panel1 vulnerability

Grafana Labs Synthetic Monitoring Agent1 vulnerability

Grafana Labs Worldmap Panel1 vulnerability

By the Year

In 2026 there have been 51 vulnerabilities in Grafana Labs with an average score of 6.6 out of ten. Last year, in 2025 Grafana Labs had 16 security vulnerabilities published. That is, 35 more vulnerabilities have already been reported in 2026 as compared to last year. Last year, the average CVE base score was greater by 0.63

Year	Vulnerabilities	Average Score
2026	51	6.61
2025	16	7.24
2024	11	6.68
2023	15	6.89
2022	24	7.13
2021	14	6.61
2020	12	7.12
2019	3	4.90
2018	4	6.95

It may take a day or so for new Grafana Labs vulnerabilities to show up in the stats or in the list of recent security vulnerabilities. Additionally vulnerabilities may be tagged under a different product or component name.

Recent Grafana Labs Security Vulnerabilities

CVE	Date	Vulnerability	Products
CVE-2026-75889	Aug 27, 2026	Grafana Alloys ServiceMonitor bearerTokenFile LFD Grafana Alloys prometheus.operator.servicemonitors component allows a user who can create or modify ServiceMonitor resources in a watched namespace to specify an arbitrary local file through bearerTokenFile. Alloy reads the file and sends its contents as a bearer token to an attacker-controlled scrape endpoint. This may disclose files accessible to the Alloy process, including its projected Kubernetes service account token, potentially granting the attacker Alloys Kubernetes permissions. Exploitation requires ServiceMonitor write access and lower privileges than Alloys service account.
CVE-2026-19854	Aug 27, 2026	Grafana ClickHouse Plugin TLS Bypass via PDC/secure SOCKS When the ClickHouse plugin uses Native protocol (the default) with PDC or secure SOCKS, it asks for TLS but the connection library ignores that and talks to ClickHouse in the clear. Username, password, queries, and results can be read on the hop after the proxy. The server certificate is never checked, and a configured client certificate is not sent.
CVE-2026-19197	Aug 26, 2026	Grafana: Insecure Deletion of CrossOrg Dashboard Snapshots (CVE202619197) A user with organization administrator permissions can delete dashboard snapshots belonging to other organizations on the same Grafana instance, and can recover a snapshot's secret delete key using only its public share key (broken access control).	Grafana
CVE-2026-17033	Aug 24, 2026	Grafana XSS via alert.generatorURL in external Alertmanager alerts An authenticated attacker with Editor access or alert.instances.external:write can submit an external Alertmanager alert containing a controlled generatorURL. The attacker is authorized to create the alert, but not to execute script in another user's Grafana session. Grafana renders alert.generatorURL directly as the Alert Details See source LinkButton href without URL-scheme sanitization or a safe-protocol allowlist. The click interceptor's :// heuristic can be bypassed by placing :// inside a JavaScript comment. When a user with read access clicks See source, the browser executes attacker-controlled JavaScript in the Grafana origin with the clicking user's permissions.	Grafana
CVE-2026-17183	Aug 19, 2026	Grafana Alert Rule Query Auth Bypass via SSR An authenticated user with permission to create or edit alert rules can bypass datasource query authorization by marking an alert rule query as a server-side expression while referencing a real datasource UID (incorrect authorization). This can expose data accessible through Grafana's configured datasource credentials to users who lack permission to query that datasource.	Grafana
CVE-2026-11817	Aug 17, 2026	Grafana Cross-Org Info Disclosure via /api/access-control This vulnerability only affects Grafana stacks configured with multiple organizations; single-organization deployments are not impacted. In a multi-organization stack, a user who is an Org Admin of a single organization can call GET /api/access-control/users/permissions/search?actionPrefix=dashboards: and receive permission data belonging to other organizations. The disclosed data is limited to dashboard and folder identifiers (UIDs) and per-user permission/scope mappings (which user holds which access on which dashboard). Dashboard contents, panels, query results, datasource credentials, secrets, and personal data are not exposed. This is a limited cross-organization information disclosure affecting multi-org deployments only.	Grafana
CVE-2026-19516	Aug 11, 2026	SSR In Grafana mcp-grafana via X-Grafana-URL Header A caller-supplied X-Grafana-URL request header controls the destination of mcp-grafana's outbound requests, and the grafana_api_request tool lets the caller also choose the HTTP method, path, and body. Because the destination is not restricted to the configured Grafana instance, a caller can direct requests at internal, loopback, and link-local network services (including metadata endpoints) and read the responses, resulting in server-side request forgery. The fix for CVE-2026-15583 prevented the configured service-account token from being sent to unintended destinations but did not restrict the destinations themselves.	Grafana
CVE-2026-72585	Aug 10, 2026	Grafana <=13.2.0 Editor Bypass Deleting Protected Contact Points	Grafana
CVE-2026-9765	Jul 24, 2026	Grafana Access Control Bypass (CVE-2026-9765) Note: The CVE and blog post don't exist because we determined this is actually a cloud-only issue. Access Controls are Broken when a user can access resources they are not authorized to access. An attacker can bypass any access control mechanisms in a web application, and gain unauthorized access to resources that are not available with their permissions. Broken access control can allow attackers to: Access resources only accessible to certain users, thus allowing unauthorized access to data Perform operations on behalf of other users, leading to account takeovers in the worst cases Attempt privilege escalation Attempt to take over an account	Grafana
CVE-2026-21723	Jul 23, 2026	Grafana Alertmanager Templates OOM via Unlimited Exec The alertmanager templates test endpoint (/api/alertmanager/grafana/config/api/v1/templates/test) can execute templates with no memory limits. Mass-executing templates in a short period causes OOM and crashes the Grafana service. The endpoint requires very low privileges and is exploitable with anonymous access enabled.	Grafana
CVE-2026-21729	Jul 16, 2026	Loki large limits memory alloc DoS Loki queries with large limits can cause large memory allocations which can impact the availability of the service, depending on its deployment strategy.
CVE-2026-15583	Jul 15, 2026	Unauthenticated Exfiltration via Confused-Deputy in Grafana MCP Server A confused-deputy flaw in Grafana MCP Server allows an unauthenticated remote attacker to exfiltrate the server's environment-configured Grafana service-account token by supplying a crafted X-Grafana-URL request header. This also enables SSRF against arbitrary internal services, including cloud metadata endpoints.	Grafana
CVE-2026-8595	Jul 10, 2026	Grafana Dashboard TableNG XSS via Malicious Field Name A user with Editor permissions can craft a dashboard whose table (TableNG) panel contains a malicious field name that executes as a script in the browser of any user who views the dashboard (stored cross-site scripting).	Grafana
CVE-2026-8609	Jul 10, 2026	Grafana OAuth Login Repeated Calls Causing Unbounded Memory Growth (DoS) An unauthenticated attacker can repeatedly call Grafana's OAuth login route with unique values, causing unbounded memory growth that can eventually exhaust memory and crash the Grafana instance (denial of service).	Grafana
CVE-2026-33382	Jul 10, 2026	Grafana API Unauthenticated Oversize DoS Several Grafana API endpoints, some of them unauthenticated, do not limit the size of the request body before processing it. An attacker can send very large payloads that force excessive memory allocation, potentially exhausting memory and causing a denial of service.	Grafana
CVE-2026-28378	Jul 07, 2026	Grafana Public Dashboard Deletion Endpoint Org Isolation Bypass The public dashboard deletion endpoint does not enforce organization isolation, allowing an Org Admin in one organization to delete public dashboards belonging to a different organization by supplying the target dashboard's identifiers.	Grafana
CVE-2026-42127	Jun 22, 2026	Grafana Public Dashboard Query DoS via Unbounded JSON Size The public dashboard query endpoint does not limit request body size before processing, allowing unauthenticated attackers to trigger excessive memory allocation by sending arbitrarily large JSON payloads. This can lead to denial of service through memory exhaustion. No valid dashboard access token or authentication is required to exploit this vulnerability.	Grafana
CVE-2026-28381	Jun 22, 2026	Grafana Snowflake Datasource GET/PUT Allows Unauthorized File Transfer The Snowflake datasource allows for GET/PUT commands, which can allow any user with access to run queries against the data source to read/write files between the local grafana server and the connected Snowflake host.
CVE-2026-9029	Jun 22, 2026	Grafana Geomap Panel XSS via sanitize-then-interpolate bug A user with Editor permissions can place a malicious script in the attribution field of a Geomap panel's XYZ tile layer via a template variable. The script then executes in the browser of any user who views the affected dashboard (stored cross-site scripting).	Grafana
CVE-2026-10601	Jun 22, 2026	Grafana Tempo/Loki Plugins: Unsanitized URL Path Traversal Exposes Admin Credentials A user with Viewer permissions can use specially crafted requests to the Tempo and Loki data source plugins to reach unintended backend endpoints. Depending on the backend configuration this can expose data source credentials, leak internal responses, or trigger administrative actions on the configured backend.	Grafana
CVE-2026-42129	Jun 22, 2026	Grafana Loki Datasource Plugin Path Traversal (callResource) A user with Viewer permissions can use a path traversal in the Loki data source plugin to reach administrative Loki endpoints and read sensitive backend configuration and internal service information.	Grafana
CVE-2026-27878	Jun 19, 2026	Grafana Tempo TraceQL OOM with Excessive Exemplars Hint A TraceQL query in Grafana Tempo with a large exemplars hint value can cause the Tempo instance to allocate an excessive amount of memory, resulting in an out-of-memory crash. This could allow an authenticated user to trigger a denial of service against the Tempo service.
CVE-2026-11769	Jun 13, 2026	Grafana Operator <=5.23 Path Traversal PrivEsc via Jsonnet 5.24.0 Fixed We have released version 5.24.0 of the Grafana Operator. This patch includes a MEDIUM severity security fix for a path traversal/privilege escalation vulnerability in the Grafana Operator. ### Summary The Grafana Operator supports loading dashboards & library panels using the jsonnet data templating language. The jsonnet expression is evaluated in the context of the operator manager pod. ### Impact It is possible for a malicious user who can create Dashboard or LibraryPanel resources for a Grafana instance to obtain the Kubernetes service account token of the Grafana Operator manager. ### Affected versions All Grafana Operator versions <= 5.23 ### Solutions and mitigations All installations should be upgraded as soon as possible. As a workaround, the following ValidatingAdmissionPolicy prevent the creation or modification of jsonnet based resources: apiVersion: admissionregistration.k8s.io/v1 kind: ValidatingAdmissionPolicy metadata: name: "prevent-jsonnet-dashboards" spec: failurePolicy: Fail matchConstraints: resourceRules: - apiGroups: ["grafana.integreatly.org"] apiVersions: ["v1beta1"] operations: ["CREATE", "UPDATE"] resources: ["grafanadashboards", "grafanalibrarypanels"] validations: - expression: "!has(object.spec.jsonnetLib)" --- apiVersion: admissionregistration.k8s.io/v1 kind: ValidatingAdmissionPolicyBinding metadata: name: "prevent-jsonnet-dashboards-clusterwide" spec: policyName: "prevent-jsonnet-dashboards" validationActions: [Deny] ### Acknowledgement We would like to thank Artem Cherezov for responsibly disclosing the vulnerability.	Grafana
CVE-2026-28374	May 13, 2026	Grafana Annotation Delete Bypass for Editors Editors could delete any annotation, even those they do not have read access to. The editor user cannot create or read the annotations.	Grafana
CVE-2026-33378	May 13, 2026	Grafana OOM: $__timeGroup Macro Overloads Server Using the $__timeGroup macro, one can achieve an OOM by overloading the server. This requires a SQL datasource. If the server is set up to auto-restart, the impact is minimal or non-existent, as the attack can take upwards of half an hour to crash the server.	Grafana
CVE-2026-28383	May 13, 2026	Grafana Plugin Resources OOM DoS via Authenticated User A request to the Grafana plugin resources endpoint can cause unbounded memory allocation by reading the entire request body into memory. An authenticated user can exploit this to trigger an out-of-memory condition, potentially causing a denial of service.	Grafana
CVE-2026-33376	May 13, 2026	Grafana Auth Proxy IPv6 /32 Default Allowlist Vulnerability When using an IPv6 allow-list for the Auth Proxy feature, it defaults to /32 addresses. Addresses specifying a mask explicitly are not affected; to mitigate easily, add the desired mask (usually /128) to the addresses. Only auth proxy is affected; Okta, SAML, LDAP, etc are unaffected here.	Grafana
CVE-2026-33380	May 13, 2026	Grafana SQL Expr: Authenticated File Read RCE A vulnerability in SQL Expressions allows an authenticated attacker to read arbitrary files from the Grafana server's filesystem. Only instances with the sqlExpressions feature toggle enabled are vulnerable.	Grafana
CVE-2026-33381	May 13, 2026	Grafana Service Account Token Mint Race: Revocation Delay When a user's access to mint tokens for a service account is revoked, it is sometimes still possible to do so for a few seconds after the event. The user will eventually lose access to do this.	Grafana
CVE-2026-28380	May 13, 2026	Grafana Snapshot Delete: Editors Can Remove Any Snapshot Any Editor could delete any snapshot, even if they have no access to read or write them.	Grafana
CVE-2026-33377	May 13, 2026	Grafana Dashboard Overwrite Privilege Escalation via Editor Access An Editor can overwrite a dashboard not owned by them to acquire admin on that specific dashboard. The user must have write access to the dashboard to escalate privilege.	Grafana
CVE-2026-28376	May 13, 2026	Grafana Live OOM via Large Body (DoS) The Grafana Live push endpoint can be exploited to cause unbounded memory allocation by sending a large or streaming request body, potentially leading to out-of-memory conditions. An authenticated user with access to the Grafana Live API can trigger this issue.	Grafana
CVE-2026-28379	May 13, 2026	Grafana Live Race Condition: Viewer Users Can Crash Server A race condition in Grafana Live allows authenticated users with Viewer role to trigger a server crash by sending concurrent requests that cause a fatal map access error. This results in complete service unavailability requiring restart of the Grafana server.	Grafana
CVE-2026-21728	Apr 24, 2026	Grafana Tempo Large Limit Memory Allocation DoS Tempo queries with large limits can cause large memory allocations which can impact the availability of the service, depending on its deployment strategy. Mitigation can be done by setting max_result_limit in the search config, e.g. to 262144 (2^18). Alternatively, automatically restart the service.
CVE-2026-21726	Apr 15, 2026	Grafana Ruler API Path Traversal via Double URL Decoding (v1/rules) The CVE-2021-36156 fix validates the namespace parameter for path traversal sequences after a single URL decode, by double encoding, an attacker can read files at the Ruler API endpoint /loki/api/v1/rules/{namespace} Thanks to Prasanth Sundararajan for reporting this vulnerability.
CVE-2025-41118	Apr 15, 2026	Pyroscope API Secret Key Leak via Tencent COS Backend <1.15.2/1.16.1/1.17.0 Pyroscope is an open-source continuous profiling database. The database supports various storage backends, including Tencent Cloud Object Storage (COS). If the database is configured to use Tencent COS as the storage backend, an attacker could extract the secret_key configuration value from the Pyroscope API. To exploit this vulnerability, an attacker needs direct access to the Pyroscope API. We highly recommend limiting the public internet exposure of all our databases, such that they are only accessible by trusted users or internal systems. This vulnerability is fixed in versions: 1.15.x: 1.15.2 and above. 1.16.x: 1.16.1 and above. 1.17.x: 1.17.0 and above (i.e. all versions). Thanks to Théo Cusnir for reporting this vulnerability to us via our bug bounty program.
CVE-2026-21727	Apr 15, 2026	Grafana Correlations: Cross-Tenant Legacy Data Disclosure/Deletion (10.2) A cross-tenant isolation vulnerability was found in Grafanas Correlations feature affecting legacy correlation records. Due to a backward compatibility condition allowing org_id = 0 records to be returned across organizations, a user with datasource management privileges could read and permanently delete legacy correlation data belonging to another organization. This issue affects correlations created prior to Grafana 10.2 and is fixed in >=11.6.11, >=12.0.9, >=12.1.6, and >=12.2.4. Thanks to Gyu-hyeok Lee (g2h) for reporting this vulnerability.	Grafana
CVE-2025-12141	Apr 15, 2026	Grafana Alerting Contact Point Write RCE & Credential Leak In Grafana's alerting system, users with edit permissions for a contact point, specifically the permissions alert.notifications:write or alert.notifications.receivers:test that are granted as part of the fixed role "Contact Point Writer", which is part of the basic role Editor - can edit contact points created by other users, modify the endpoint URL to a controlled server. By invoking the test functionality, attackers can capture and extract redacted secure settings, such as authentication credentials for third-party services (e.g., Slack tokens). This leads to unauthorized access and potential compromise of external integrations.	Grafana
CVE-2026-27879	Mar 27, 2026	Grafana OOM Crash via Resample Query Abuse A resample query can be used to trigger out-of-memory crashes in Grafana.	Grafana
CVE-2026-28375	Mar 27, 2026	Grafana OOM Crash via Testdata Data-Source Exploitation A testdata data-source can be used to trigger out-of-memory crashes in Grafana.	Grafana
CVE-2026-27876	Mar 27, 2026	Grafana RCE via SQL Expressions Plugin A chained attack via SQL Expressions and a Grafana Enterprise plugin can lead to a remote arbitrary code execution impact (RCE). This is enabled by a feature in Grafana (OSS), so all users are always recommended to update to avoid future attack vectors going this path. Only instances with the sqlExpressions feature toggle enabled are vulnerable. Only instances in the following version ranges are affected: - 11.6.0 (inclusive) to 11.6.14 (exclusive): 11.6.14 has the fix. 11.5 and below are not affected. - 12.0.0 (inclusive) to 12.1.10 (exclusive): 12.1.10 has the fix. 12.0 did not receive an update, as it is end-of-life. - 12.2.0 (inclusive) to 12.2.8 (exclusive): 12.2.8 has the fix. - 12.3.0 (inclusive) to 12.3.6 (exclusive): 12.3.6 has the fix. - 12.4.0 (inclusive) to 12.4.2 (exclusive): 12.4.2 has the fix. 13.0.0 and above also have the fix: no v13 release is affected.	Grafana
CVE-2026-27880	Mar 27, 2026	Grafana OOM from OpenFeature Unbounded Memory Read in Toggle Evaluator The OpenFeature feature toggle evaluation endpoint reads unbounded values into memory, which can cause out-of-memory crashes.	Grafana
CVE-2026-27877	Mar 27, 2026	Grafana Direct Data-source Password Disclosure in Public Dashboards When using public dashboards and direct data-sources, all direct data-sources' passwords are exposed despite not being used in dashboards. No passwords of proxied data-sources are exposed. We encourage all direct data-sources to be converted to proxied data-sources as far as possible to improve your deployments' security.	Grafana
CVE-2026-28377	Mar 26, 2026	Grafana Tempo S3 SSE-C Encryption Key Exposure via /status/config Endpoint A vulnerability in Grafana Tempo exposes the S3 SSE-C encryption key in plaintext through the /status/config endpoint, potentially allowing unauthorized users to obtain the key used to encrypt trace data stored in S3. Thanks to william_goodfellow for reporting this vulnerability.
CVE-2026-21724	Mar 26, 2026	Grafana OSS: Auth Bypass in Contact Points API (Editor can spoof URLs) A vulnerability has been discovered in Grafana OSS where an authorization bypass in the provisioning contact points API allows users with Editor role to modify protected webhook URLs without the required alert.notifications.receivers.protected:write permission.	Grafana
CVE-2026-33375	Mar 26, 2026	Grafana MSSQL Plugin OOM Crash via Viewer API Bypass The Grafana MSSQL data source plugin contains a logic flaw that allows a low-privileged user (Viewer) to bypass API restrictions and trigger a catastrophic Out-Of-Memory (OOM) memory exhaustion, crashing the host container.	Grafana
CVE-2026-21725	Feb 25, 2026	Grafana TOCTOU Data Source Deletion Reuse A time-of-create-to-time-of-use (TOCTOU) vulnerability lets recently deleted-then-recreated data sources be re-deleted without permission to do so. This requires several very stringent conditions to be met: - The attacker must have admin access to the specific datasource prior to its first deletion. - Upon deletion, all steps within the attack must happen within the next 30 seconds and on the same pod of Grafana. - The attacker must delete the datasource, then someone must recreate it. - The new datasource must not have the attacker as an admin. - The new datasource must have the same UID as the prior datasource. These are randomised by default. - The datasource can now be re-deleted by the attacker. - Once 30 seconds are up, the attack is spent and cannot be repeated. - No datasource with any other UID can be attacked.	Grafana
CVE-2025-41117	Feb 12, 2026	Grafana Explore Traces XSS via raw HTML stack traces Stack traces in Grafana's Explore Traces view can be rendered as raw HTML, and thus inject malicious JavaScript in the browser. This would require malicious JavaScript to be entered into the stack trace field. Only datasources with the Jaeger HTTP API appear to be affected; Jaeger gRPC and Tempo do not appear affected whatsoever.	Grafana
CVE-2026-21722	Feb 12, 2026	CVE-2026-21722: Grafana Public Dashboard Annotation Timerange Exfiltration Public dashboards with annotations enabled did not limit their annotation timerange to the locked timerange of the public dashboard. This means one could read the entire history of annotations visible on the specific dashboard, even those outside the locked timerange. This did not leak any annotations that would not otherwise be visible on the public dashboard.	Grafana
CVE-2026-21721	Jan 27, 2026	Grafana Dashboard Permissions PrivEsc via API Scope Bypass The dashboard permissions API does not verify the target dashboard scope and only checks the dashboards.permissions:* action. As a result, a user who has permission management rights on one dashboard can read and modify permissions on other dashboards. This is an organizationinternal privilege escalation.	Grafana